Quantum computing and polynomial equations over the finite field Z 2 
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What is the computational power of a quantum computer? We show that determining the output 
of a quantum computation is equivalent to counting the number of solutions to an easily computed 
set of polynomials defined over the finite field Z2 . This connection allows simple proofs to be given 
for two known relationships between quantum and classical complexity classes, namely BQP C p# p 
and BQP C PP. 



I. INTRODUCTION 

Quantum computers have stimulated great interest due 
to their promise of being able to solve problems consid- 
ered infeasible on conventional classical computers 0, • 
This interest has led to rapid developments in physics, 
mathematics, and computer science |3l H|- One of the 
central open problems in quantum computation is to pre- 
cisely characterize the power of quantum computers, i.e., 
what problems they can and cannot solve efficiently. 

In this paper we show that determining the output of a 
quantum computation is equivalent to counting the num- 
ber of solutions to certain sets of polynomial equations 
over the finite field Z2. Equivalently, in the language 
of algebraic geometry, this means counting the number 
of points in an algebraic variety. The proof combines 
Feynman's sum-over-paths formulation of quantum me- 
chanics 0, |ij with a description of quantum computing 
in terms of a universal set of quantum gates specially 
chosen to make the sum-over-paths take a simple form. 

This reformulation of quantum computation is inter- 
esting for several reasons. First, it reveals a connection 
between quantum computation and one of the central 
problems in algebraic geometry. Indeed, much of the de- 
velopment of modern algebraic geometry 0, 0] has been 
driven by the problem of counting the points in an al- 
gebraic variety, e.g., this problem gave rise to the well- 
known Weil conjectures |9J. Second, it reveals a connec- 
tion between quantum computation and computational 
complexity. In particular, computational complexity the- 
orists have shown that the problem of counting solutions 



to polynomials over finite fields is #P-complete 0, ^] . 

As a consequence of this connection, our result has 
as a corollary a simple proof of one of the sharpest 
known results relating quantum and classical complex- 
ity classes 1 0, BQP C P# p , where BQP is, infor- 
mally, the class of decision problems efficiently soluble 
on a quantum computer. The complexity class P# p 
is, in turn, a subset of the well-known complexity class 
PSPACE of problems requiring polynomial space (but 
possible exponential time) to solve on a classical com- 
puter. Proving P ^ PSPACE would represent a major 
breakthrough in classical complexity theory. A conse- 
quence of the result BQP C PSPACE is that any proof 
that quantum computers are more efficient than classi- 
cal computers will imply P 7^ PSPACE, and thus would 
have major implications for classical computational com- 
plexity. 

Our techniques also imply a simple proof of a re- 
sult even sharper than BQP C P# p , namely BQP C 
PP ^5|- To our knowledge, this is the sharpest known 
relation between BQP and a natural classical complexity 
class 2 . 

As described above, our approach is based on the sum- 
over-paths formulation of quantum mechanics. Interest- 
ingly, the papers just mentioned 0,0,0] all use vari- 
ants of the sum-over-paths formulation to obtain their 
relations between BQP and various classical complex- 
ity classes. This is also true of the paper by Knill and 
Laflamme [T^ . which connects quantum computation to 
the problem of estimating quadratic weight enumerators. 
What all these papers share in common is that in evalu- 
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1 For a general overview of computational complexity theory, 
see |12| . For definitions and references on all the complexity 
classes we consider here, and many others, an excellent reference 
is Aaronson's "Complexity Zoo" ll-jl . 

2 A stronger relation, BQP C AWPP has been proved by Fort- 
now and Rogers lit) . However, as they note, AWPP is a rather 
artifical complexity class. 
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FIG. 1: An example N = 3 quantum circuit containing two 
Toffoli gates and four Hadamard gates. 
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FIG. 2: The wires in the example circuit have been anno- 
tated with the allowed classical paths starting with input 
(01,02,03). 



ating the amplitude for a particular path through a quan- 
tum computation, it is necessary to keep track of both 
the phase of the amplitude, and also of the magnitude of 
the amplitude. By choosing a particular universal gate 
set, we simplify the problem so that it is necessary to 
keep track only of the phase, not of the magnitude. By 
doing this, the relationship between quantum computing 
and polynomial equations arises in a natural way. 

The structure of the paper is as follows. We begin 
our account in Section [H] with an example showing how 
the matrix elements of a unitary quantum circuit may 
be computed by counting the number of solutions to a 
set of polynomial equations over Z2 . This example then 
motivates a general argument, given in Section lTTTl show- 
ing that the matrix elements of a quantum circuit may 
always be computed by counting the solutions to an ap- 
propriate set of polynomial equations. Section IIVI dis- 
cusses the implications of this result for the solution of 
decision problems on quantum computers, and for the re- 
lation between quantum and classical complexity classes. 
Section ]V\ discusses whether or not it is possible to com- 
bine our approach with Monte Carlo sampling techniques 
to obtain an efficient classical procedure for simulating 
quantum computers; unsurprisingly, this attempt fails, 
but the failure is instructive. Section lVIl describes various 
possible reformulations of our results, and some prospects 
for further simpilification. We conclude in Section IVIII 



II. EXAMPLE OF HOW TO FIND THE 
POLYNOMIALS 

In this section, we provide an example showing how to 
calculate a transition amplitude for a quantum circuit by 
counting the number of solutions to sets of polynomial 
equations. We explain the method with the aid of a sim- 
ple example quantum circuit, but delay the general proof 
until the next section. 

All our results rely on constructing circuits out of cer- 
tain specially chosen sets of universal gates. For our 
initial discussion we will use the Toffoli and Hadamard 
gates, which have been shown to be universal for quan- 



tum computation by Shi [T3 and Aharonov [l!J] 3 . Later 
we'll discuss the general properties of a gate set necessary 
to make our style of argument work. Recall that a Tof- 
foli gate has action on computational basis states given 
by \x, y, z) — > \x, y, z ® xy). The single-qubit Hadamard 
gate maps |0) to (|0> + |1})/V2 and |1) to (|0) - |l))/\/2. 

Suppose we are given some A^-qubit quantum circuit, 
constructed from Toffoli and Hadamard gates. A simple 
example for A" = 3 is shown in Fig. ^ Imagine, further, 
that we wish to calculate the matrix element (b|J7|a), 
where U is the unitary action of the quantum circuit, and 
where |a) and |b) are computational basis states (that 
is, I a) = \a ,ai,--- ,cln-i), where (a , ax, ■ ■ ■ , ajy-i) G 
1*2 N is a bit string, and similarly for |b)). 

To determine (b|t/|a) we will define the notion of 
a set of allowed or admissible classical paths through 
the circuit, from input (do, ax, • • • , o>N-x) to output 
(60, bx, ■ ■ ■ , and the corresponding phases associ- 

ated with each of those paths. To define the allowed 
classical paths, we first define what we shall call a clas- 
sical version of the quantum circuit in Fig. ^ This is 
a classical circuit which is formed by replacing each of 
the qubits in Fig. ^ with a classical bit, by replacing the 
quantum Toffoli gate by a classical Toffoli gate, which 
takes (01,02,03) to (01,02,03 © 0102), and by replacing 
each Hadamard gate by what we shall call a classical 
Hadamard gate, which, regardless of its input, may out- 
put either a zero or a one. To describe this situation we 
introduce a path variable x G Z2 to denote the output of 
the Hadamard: 



A classical path is then a sequence of classical bit strings, 
a, a', a", . . ., with the respective bit strings correspond- 
ing to the state of the classical circuit after each gate has 
been applied. A classical path is said to be allowed or 
admissible if there exists a choice of the path variables 



3 Note that the Hadamard and Toffoli gates have only real matrix 
elements, so cannot generate a de nse sub set of the full unitary 
group. The universality proofs of |l8t I Hi use simple encodings 
to achieve universality. 
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giving rise to that path. If there are h Hadamard gates 
in a particular circuit, then there will be 2 h distinct al- 
lowed classical paths, with each path corresponding to a 
different choice of the path variables xi, x 2 , . . . , Xh. 

In Fig. |2 these rules have been applied to construct 
a classical circuit from the example quantum circuit. 
Fig. |21 shows all allowed classical paths from the input 
string (ai, 02,03), as a function of the path variables 
(x%, . . . ,2:4) = x. Note that there are 2 4 = 16 admis- 
sible paths corresponding to all the possible bit assign- 
ments of the variables x. The output bit values, de- 
noted i?j(x), are polynomial functions of the Xj, i.e., el- 
ements of the polynomial ring Z2[x]. In this example, 
Bx(x) — X3 © X2X4, B 2 (x) = x 2i and -B 3 (x) = 24. 

We now define the phase 0(x) of an allowed classical 
path with path variables x. This definition may appear 
a little mysterious at first; its importance will become 
clearer below. We define the phase to be the sum (modulo 
2) over all (classical) Hadamard gates, of the product of 
the input and output bit values of the gate: 

0(x) = (input value) (output value). (2) 

Hadamard gates 

</>(x) is a polynomial function of the Xj . In this example 
tp(x) = a x xi © a 2 x 2 © X1X3 © £4(03 © X1X2). 

It turns out that the matrix element (b|£/|a) is given 
by the following sum over allowed paths from a to b: 

(b|[/|a) = -L= £ (3) 

^ 2 ' x: B(x)=b 

We will prove this explicitly in the next section; however, 
we hope this expression is at least plausible to the reader, 
expressing the transition amplitude as a sum over the 
allowed paths through the circuit, with amplitudes of the 
appropriate magnitude and phase. The terms in the sum 
all have the same absolute value, but vary in sign. We 
define #(0) and #(1) to be the number of positive and 
negative terms in the sum respectively. That is, 

#(0) = I {x I B(x) = b and 0(x) = 0} | , (4) 

and 

#(l) = |{x|B(x)=band<Kx) = l}|. (5) 
Eq. can now be written as 

(b|[/|a) = -i=[#(0)-#(l)]. (6) 

The expressions in Eqs. Q and iJSJ each count solutions 
to a system of N + 1 polynomials in h variables over the 
field Z2. We can make some general remarks about the 
properties of these polynomials. If we ensure that each 
Toffoli gate is followed by a Hadamard gate on the target 
line (if necessary by inserting pairs of Hadamard gates, 
which act as the identity gate), then the polynomials 
Bj(x) will have at most two terms and have order at 



most two, and 0(x) will have at most 2h terms and order 
at most three. 

As a simple example of this method in action, let's 
calculate (0|f7|0) in the example circuit. B(x) = has 
two solutions, x\ = or 1, x 2 = 0, X3 = 0, £4 = 0. For 
each solution 0(x) = 0, so #(0) = 2 and #(1) = 0. Thus, 
(0\U\0) = 2/ v / T6 = 1/2, which is easily verified to be the 
correct amplitude. 

III. GENERAL PROOF 

In this section we prove that the method in the pre- 
vious section works for any quantum circuit made from 
Hadamard and Toffoli gates. To do this, we express the 
unitary action U of the circuit as a product of gates: 

U=U (M) U (M-1)^ U (2) U (1)_ (7) 

Each of the gates represents either a Hadamard 

acting on one qubit, or a Toffoli gate acting on three 
qubits. Each I7( m ) will thus act as an identity on all but 
one or three of the qubits. 

For the general case in Eq. J7J), it is clear that we can 
write 

(b|tf|a>= Yl WM\*)(*\Ul M -V\y) ... 

c,d,..., z (8) 

... (d|E/^|c)(c|C/W|a) 

where c, . . . , z are each bit strings of length N. Eq. © 
expresses the transition amplitude of the entire circuit 
from the initial state a to the final state b as a sum 
of amplitudes over all sequences of computational states 
a^c^d^ . . . — > z — > b through the circuit. For each 
of these sequences, the corresponding term in the sum 
is given by a product of contributions from each of the 
gates U( m K This is already very close to the "sum over 
classical paths" approach used in the previous section. 
To complete the connection, we must first show that the 
sum in Eq. © may be restricted to the set of allowed 
classical paths as defined in the previous section, and 
second, that those remaining terms in the sum are equal 
to the terms in Eq. J3J). 

Consider a factor (s|[/( m )|r) from Eq. (|SJ). Say that 
acts as the identity on qubit k. Then, if s k ^ r k , 
the factor (s|f7^ m ^|r) will be zero. Suppose that this is 
not the case for any of the qubits on which [A TO ) acts 
as the identity, and that I7( m ) is a Toffoli gate acting 
on qubits k\, k 2 and k^. From the definition of the Tof- 
foli gate, (s|[/( m > |r) will equal one if s kl = r kl , s k2 = r k2 , 
and Sfc 3 = r ks ®r kl r k2 , and will equal zero otherwise. Al- 
ternatively, suppose is a Hadamard gate acting on 
qubit k. Then, from the definition of the gate, (s|?y( m )|r) 
will equal — 1/V2 if s k = r k = 1 (that is, if s k r k = 1), 
and will equal 1 / \/2 otherwise. 

From these observations, we see that the terms in 
Eq. (JSJ are nonzero only when a^c^...^z^b 
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FIG. 3: Reformulating a quantum circuit for a decision prob- 
lem so that it only outputs states of the form |0}|0) or |0)|1). 



is an allowed classical path. Furthermore, the absolute 
value of any nonzero term will be equal to where 
h is the number of the gates U^ m > that are Hadamards. 
Further, the sign of such a term will be (— l) p , where p 
is defined by summing over the product of the input and 
output values to each classical Hadamard gate. Thus, we 
have proven Eq. @ and hence Eq. JBJ, as required. 



IV. APPLICATION TO DECISION PROBLEMS 
AND COMPUTATIONAL COMPLEXITY 



The results described in the previous section have in- 
teresting consequences in the special case when the quan- 
tum computer is being used to solve a decision problem, 
i.e., a problem where the answer is either "yes" or "no". 
Many interesting problems are either explicitly decision 
problems, e.g., satisfiability, or can be recast as equiva- 
lent decision problems 0, e.g., factoring and the trav- 
elling salesman problem. 

A priori it is not obvious that the ability to calculate, 
even extremely efficiently, the matrix elements of quan- 
tum circuits is particularly useful. This is because there 
are exponentially many matrix elements for a given quan- 
tum circuit, ft would appear that even a constant-time 
recipe to calculate matrix elements would, at best, pro- 
vide an exponential method to estimate the output of a 
given quantum circuit. However, following |2Cj . we now 
show that when a quantum circuit is being used to solve a 
decision problem, the output of the quantum circuit can 
be inferred from knowledge of one fixed matrix element. 

Consider a quantum circuit U x for an instance x of an 
arbitrary decision problem. We suppose for now that the 
quantum circuit is deterministic, i.e., it gives the correct 
output with probability f . We may also suppose, without 
loss of generality, that the output ( "no" or "yes" ) is indi- 
cated by the value of the first output qubit Q\, as |0) or 
|1), respectively. The remaining output qubits Q2 • ■ ■ Qn 
are left in a "junk" quantum state \<j>). By adjoining an 
ancilla qubit Qa initialised in the state |0) and then ap- 
plying a CNOT gate onQi and Qa the answer f[x) can be 
copied into Qa (see Fig.[3J|. Finally, applying the inverse 
operation U\ to qubits Qx' "Qn uncomputes the out- 



put state to the initial state |0). The state of the quan- 
tum computer is now \0)q 1 .,,q n |/(x))q a . Without loss 
of generality it is therefore possible to assume that any 
quantum circuit for an instance £ of a decision problem 
outputs one of only two possible states: |O)|0) or |0)|1). 
ft follows that knowledge of only one matrix element is 
enough to understand the output of such a quantum cir- 
cuit. 

A useful corollary of this construction is that to de- 
termine the output of the quantum circuit it is actually 
sufficient to determine the sign of a single amplitude. To 
see this, suppose in the construction above that we had 
applied a not gate and a Hadamard first to the ancilla 
qubit, so it was in the state (|0) — \ l))/y/2. Applying U x , 
the CNOT and Uj., as was done in the earlier construc- 
tion, followed by another Hadamard to the ancilla qubit, 
gives as output (— l)^^^|O)|0). It follows that knowledge 
of just the sign of the amplitude determines fix). In con- 
sequence of this observation, through the sequel we will 
change our notation somewhat, and denote the relevant 
matrix element as (0|{7 X |0). 

In making this argument, we have assumed that the 
quantum circuit solves the decision problem with prob- 
ability 1, i.e., deterministically. However, following the 
lines of [21|, a more elaborate calculation based on the 
same idea shows that a similar result holds even for a 
quantum circuit which only outputs the correct answer 
probabilistically, provided the probability is bounded be- 
low by some appropriate constant, say 3/4. Thus, to 
determine the output of a quantum circuit which solves 
some decision problem it suffices to determine the sign of 
a single matrix element (0|J7 X |0). 

In the context of quantum computational complexity 
our results provide as an immediate corollary the result 
BQP C P# p , due to Bernstein and Vazirani ^4|. We 
now outline the proof. Recall that the class P# p is de- 
fined to be the class of decision problems decidable in 
polynomial time with the aid of an oracle which com- 
putes, at unit cost, the solution to a problem complete 
for #P. To sec that BQP C P# p , we suppose our ora- 
cle O(p) accepts as input a set of polynomials p <E Za[x], 
and returns the number of solutions of the corresponding 
set of equations over Z2. Supplied with such an oracle 
it is clear from the results of Sections [H] and IIIII that 
we can determine the amplitudes at the output of a uni- 
formly generated quantum circuit of polynomial size, and 
thus decide any language in BQP. Because the problem 
of counting solutions to polynomial equations over Z2 is 
clearly in #P, we obtain the inclusion BQP C P# p . 

Our techniques can also be used to prove the stronger 
inclusion BQP C PP, due to Adleman, Demarrais, and 
Huang [l^. To see this, recall the definition of PP due to 
Fenner, Fortnow and Kurtz 22] 4 . First, define a GapP 



4 The original definition is due to \>A . but is more unwieldly in 
the present context. 
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function to be a function expressible as the difference of 
two #P functions. Then the class PP consists of all 
those languages L such that for some GapP function /, 
and for all x, either (a) if x is in L, then f(x) > 0; or (b) 
if x is not in L then f(x) < 0. 

The proof that BQP is a subset of PP is now trivial. 
The transition amplitude (0 1 t/a; 1 0) may be written as 

V 2 

which makes it a difference of two #P functions, #(0) 
and #(1), and thus the amplitude (0|[/J0) is a GapP 
function. The result follows using 22] 's definition of PP. 

V. SAMPLING METHODS FOR SIMULATING 
QUANTUM CIRCUITS 

An interesting question to ask in the light of our re- 
sults is whether they can provide a means of speeding up 
the simulation of quantum computers by classical means. 
An obvious technique for doing this is to use Monte Carlo 
sampling to estimate the number of solutions to the equa- 
tions of interest. Unfortunately, this technique fails to 
work in general. 

To see why sampling fails, let's look at how such an al- 
gorithm might work. We suppose we have worked out the 
polynomials Bj(xi,X2, ■ ■ ■ , Xh), where j ranges over the 
N output qubits, and there are h Hadamard gates. For a 
decision problem, an admissible path x for the quantum 
circuit is one for which -Bj(x) = 0, Wj = 1, . . . , N, corre- 
sponding to calculating the matrix element (0|£/a;|0). As 
before we define 

#(O) = |{x|B(x)=Oand0(x)=OH (10) 

and 

#(l) = |{x|B(x)=Oand0(x) = l}|, (11) 

so that 

<0|tf|0) = -±=[#(0) -#(1)]. (12) 
V 2, 

To estimate (0|f7|0) we need to estimate both #(0) and 
#(1). A 'priori it is possible that #(0) and #(1) scale as 
2 , so to obtain an estimate of (0|J7|0) accurate to some 
constant precision requires a number of trials exponential 
in h. It follows from these observations that Monte Carlo 
sampling is not, in general, an efficient way of estimating 
amplitudes for quantum computation. 

VI. OTHER GATE SETS 

What other universal gate sets might be amenable to 
the path-sums approach? Might it be possible to find 
universal sets giving rise to sets of polynomial equations 



for which it is possible to efficiently estimate the number 
of solutions? To answer these questions, note that the 
key property of the gate set used in the path-sum ap- 
proach is that the amplitudes in each gate are balanced, 
i.e., the non-zero elements of the gate all have the same 
absolute value. For example, the non-zero elements of 
the Hadamard gate all have absolute value l/v% while 
the non-zero elements of the Toffoli gate all have absolute 
value 1. Given any universal set of balanced gates, it is 
not difficult to write down a sum-over-paths formulation 
along similar lines to that done for the Hadamard- Toffoli 
set in Sections ITT1 and ITTT1 

Rather than a general discussion, we will simply give a 
single informative example of the results obtained when 
this approach is followed, basing our discussion on the 

universal set consisting of T = ^ * s£ ^ , H, and CNOT. 

Applying the procedure described in Sections ITU and UTTI 
to a quantum circuit composed only of T, H, and CNOT 
shows that that an amplitude (b|E/|a) can be found ac- 
cording to the following recipe. First, define a classical 
circuit corresponding to the quantum circuit by replac- 
ing all qubits by bits, quantum CNOTs by classical CNOTs, 
T gates by identity operations, and Hadamard gates by 
classical Hadamard gates, as earlier. Notions of path 
variables and admissible paths are defined as before; note 
that the polynomials Bj(x) are now linear in the path 
variables x, due to the linearity of the gates appearing 
in the classical circuit. We can thus write the transition 
amplitude 

(b|C/|a)= J2 ( 13 ) 

X :B 3 (x)=b 

where the phase factor $(x) depends on the value of the 
path variables x. Following an argument analogous to 
that in Sections ITTI and ITTT1 we find that these phases can 
be written in the form exp(i7rt/3(x)/4), where </?(x) is a 
polynomial in the path variables x; it is a polynomial 
in mixed arithmetic involving multiplication over Z2 and 
addition over Zs. Because the Bj are linear, it is possi- 
ble to eliminate variables, moving to a new set of uncon- 
strained variables y € Zj h , and writing the transition 
amplitude as 

(b|f/|a) =^exp( l ^(y)/4), (14) 
y 

where 0(y) is again a polynomial in mixed arithmetic 
involving multiplication over Z2 and addition over Zs; 
with a little work, it can easily be verified that <fi is of 
order at most two. It follows that all we need do is count 
the number of solutions to the eight equations 4>(y) = 
0, 4>{y) = 1, ■ ■ ■ , 4>{y) = 7, in order to determine such a 
transition amplitude. 

This example illustrates a number of interesting fea- 
tures. First, the polynomial is of order two, as com- 
pared with the order three polynomials that arose with 
the Hadamard- Toffoli gate set. Second, the way in which 
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we do arithmetic is substantially more complex than in 
the Hadamard-Toffoli case. Third, we now have only to 
count solutions to a single polynomial equation, instead 
of a set of simultaneous polynomial equations. There 
three features illustrate a general fact: choosing differ- 
ent sets of universal gates gives rise to sets of polynomial 
equations with different structures. It is an interesting 
problem to find gate sets giving rise to particularly nice 
sets of equations in the sum-over-paths approach. 

We mention one final variation on our result that seems 
worth pursuing. This is a sum-over-paths approach to the 
Heisenberg representation of quantum computation |'2-l| , 
i.e., using the stabiliser formalism 0, |2^|. In this for- 
malism the |0) state of N qubits is described as the si- 
multaneous + 1 eigenspace of the stabilizer generators 
Sq = (Zi, . . . , Zjy). Subsequent evolution through a 
quantum circuit U x is described by conjugating each of 
the stabilizer generators by the unitary U x . It is well 
known 5 that the effect of Clifford group gates such as the 
Hadamard and CNOT is to take products of Pauli matri- 
ces (like Z\, . . . , Zjy) to other products of Pauli matrices 
under conjugation, and for a circuit entirely made up of 
Clifford group gates this enables us to easily determine 
the final state at the end of the computation. However, 
the Clifford group gates are not universal on their own. 
To get a universal set, we need to add another gate, such 
as the T gate, which when acting on X, Y, and Z induces 
the following transformations: 



TYTt _ X + Y TYT^ = — + Y 
and TZT ] = Z. 



(15) 



It is now possible to apply a sum-over-paths approach to 
each of the stabilizer generators, with the T gate play- 
ing a similar role to that played by H in the sum-over- 
paths approach based on quantum states. In this case 
each "path" is a sequence Sj of sets of stabiliser gener- 
ators. A "matrix element" is the amplitude to induce 
a transition between the initial set of (Pauli) stabiliser 

5 See, e.g., the discussion of the Gottesman-Knill theorem in Chap- 
ter 10 of 0. 



generators iSo to some final set of (Pauli) stabiliser gen- 
erators S m -\. Thus determining the stabilizer generators 
at the end of a computation is equivalent to counting the 
number of solutions to certain sets of polynomial equa- 
tions. Of course, even if that could be done, there would 
still remain the difficulty of working out the measurement 
statistics resulting from a measurement of the final state 
output at the end of the circuit. Nonetheless, this al- 
ternative description may provide a different insight into 
the complexity of quantum circuit simulation. 

VII. CONCLUSION 

In conclusion, we have shown that quantum computa- 
tion is intimately connected with the problem of counting 
the number of solutions to sets of polynomial equations, 
i.e., to counting points on an algebraic variety. This is 
a well-known problem in mathematics, and one of the 
central problems of algebraic geometry; even for the case 
where there is just a single polynomial, this problem is 
connected to deep topics such as the Weil conjectures. 
In the context of computational complexity, it is known 
that the problem of counting solutions to polynomials 
over finite fields is #P-complete. It is possible that bet- 
ter understanding the structure of the polynomial equa- 
tions associated with quantum computations may result 
in further insight into the computational power of quan- 
tum computers. 
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